CodeQL Alert #1 - Security rule js/incomplete-sanitization triggered

[jwj019]

Tool: CodeQL (2.14.5)
Rule: js/incomplete-sanitization
Severity: warning (Security level: high)
Description: Incomplete string escaping or encoding
Instance reference: refs/heads/main
Instance state: open
Location: dist/index.js @ l9666:c12-l9666:c28
Message: This replaces only the first occurrence of '*'.

CodeQL Alert Link

[jwj019]

Related Trello card: https://trello.com/c/lhCeapWS/33-niaid-monarch-actions-switch-account-codeql-alert-1-security-rule-js-incomplete-sanitization-triggered